The web ui reads the list of agents from the following directory <ossec_install_dir>/queue/agent-info
Try going into that directory and deleting the file corresponding to the agent that you deleted. On Wed, Jul 20, 2011 at 10:51 AM, blacklight <[email protected]> wrote: > I am indeed referring to the ossec web-ui. > > The host is listed as "inactive" and has not generated any alerts > since it has been removed via /var/ossec/bin/manage-agents. > > On Jul 20, 9:27 am, Christopher Moraes <[email protected]> wrote: > > Are you refering to the ossec web-ui? which screen is showing the host? > > > > If it is the alerts screen, you will continue to see the host, as it has > > generated alerts which are present in the alert log file, that the web-ui > is > > parsing. > > > > > > > > > > > > > > > > On Tue, Jul 19, 2011 at 7:01 PM, blacklight <[email protected]> wrote: > > > Hello Folks, > > > > > I am trying to get a host that I had removed from OSSEC monitoring > > > through /var/ossec/bin/manage-agents completely off the list of hosts > > > in the OSSEC GUI - The host name still remains on the OSSEC GUI but > > > it's a ghost (or if you prefer, a zombie) - How do I wipe this ghost > > > out? >
